Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: i3mposWDuaA/flUeLg4UeynsfEWAUKQ1NSEVYEmrTDk=
Subject key identifier: C6:A7:A1:57:F4:02:7F:07:BA:B6:F1:1F:62:3A:1E:D2:0B:BD:11:BD
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 0194C350A5CB1F7460FE29404686756EB2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 04BB
Signing time: Sat 01 Feb 2025 21:00:29 +0000
Manifest this update: Sat 01 Feb 2025 21:00:29 +0000
Manifest next update: Sun 02 Feb 2025 21:00:29 +0000
Files and hashes: 1: QibySFZaXewQr4QESSxx19Q8JHM.roa (hash: zVxfg7PiMWQ6UyYxsZ1jAEqz1KJPUVidd+WK6y5CEjE=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: BvBQrztySbSxDkrAOdp7G5e3NYnABJEx5I7DwFLEGLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:a5:cb:1f:74:60:fe:29:40:46:86:75:6e:b2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Feb 1 21:00:29 2025 GMT
Not After : Feb 2 21:00:29 2025 GMT
Subject: CN=c6a7a157f4027f07bab6f11f623a1ed20bbd11bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:4f:21:dc:2a:95:36:08:24:9d:ac:4d:d4:
1a:c9:7d:68:a1:20:4e:b8:10:d6:91:1b:20:0f:43:
5a:35:09:d0:91:13:77:7d:39:10:e6:ba:39:c7:1f:
2d:f5:1f:74:e5:ec:89:c8:34:fd:3e:e1:08:f6:91:
e7:ab:bf:bb:19:7b:a5:e3:c4:e8:13:74:36:59:f5:
39:45:a9:f4:2d:8b:18:9f:82:a2:bb:ad:f5:38:ae:
e3:33:f3:99:47:ab:9d:7f:ea:bc:4a:4d:c3:b6:20:
43:b7:96:49:8a:13:08:93:94:8b:93:4b:86:c8:8e:
5a:04:3d:f2:0c:62:71:65:cd:22:b9:b9:2e:81:e6:
84:55:49:46:29:66:c3:52:4e:4e:01:f6:7b:b0:73:
b7:a1:50:cd:5e:ad:d5:f2:aa:0f:7b:a5:74:41:7b:
19:07:29:ae:32:a4:a3:8f:ba:1a:0b:39:ae:b4:25:
17:c2:37:7d:01:66:ae:7c:73:10:cf:bc:c1:ba:2b:
1d:63:b0:e1:a2:58:b7:e3:5b:bf:de:18:b6:d4:60:
ac:04:ac:ff:78:9f:4c:d5:0e:96:32:3d:e3:45:40:
bf:98:d6:9d:40:b2:00:7f:ea:2a:ff:62:9d:30:63:
e1:23:aa:ea:70:2e:6d:5d:4d:95:0f:9a:b9:de:f1:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A7:A1:57:F4:02:7F:07:BA:B6:F1:1F:62:3A:1E:D2:0B:BD:11:BD
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6d:d7:58:88:f3:e7:7d:09:b3:07:99:bc:70:32:f2:13:22:
e4:35:98:c1:d4:8b:45:69:fa:a5:25:fb:69:1c:52:00:52:9a:
cb:20:03:4f:48:f5:47:b7:21:87:2f:f2:ac:d7:86:b4:67:ac:
b8:6c:60:0e:48:d9:01:79:13:fa:45:8f:61:87:41:16:c5:0a:
f6:07:1f:8a:3e:a7:de:26:d6:d6:7d:13:25:52:dd:6c:ba:dd:
35:42:3d:41:b3:00:f3:ad:67:27:19:43:28:67:9e:5b:7f:2d:
94:98:25:ab:b1:e4:bb:df:1a:41:30:87:1b:d6:86:b9:8b:fc:
6a:6a:b2:cc:98:32:33:70:07:ab:fc:4f:18:4a:8a:b2:39:0f:
2b:a2:57:2a:d5:31:fc:b4:56:8b:b0:ed:0c:88:88:dd:72:28:
39:8d:23:4b:f9:1b:5a:ae:21:be:eb:a2:40:7f:b8:ac:09:b4:
c3:74:ac:54:9f:bf:e0:61:a3:70:09:07:c8:5d:eb:55:97:7d:
ca:9e:6f:99:c9:1e:6f:ab:62:83:4e:db:31:b9:22:18:24:7a:
f9:8b:6b:4b:32:f0:29:a0:db:ba:3f:41:61:50:b5:6a:2e:5e:
be:89:66:38:84:0d:84:d0:6e:b0:0e:32:f3:65:a1:2b:51:6f:
4d:1c:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:30 2025 by rpki-client